Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
File:                     E1-CL_RWQDka60bEN1QQAmBpOlc.mft (raw, json)
Hash identifier:          gemw68xhizH7V/ee36z1aAfZxnMb/W3VKlTwZpCEsWI=
Subject key identifier:   1A:18:0B:BC:74:AF:1C:F4:40:A4:B8:67:71:E6:F9:01:F4:E0:5E:CE
Authority key identifier: 13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57
Certificate issuer:       /CN=A91C9484/serialNumber=135F822FF45640391AEB46C43754100260693A57
Certificate serial:       254D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
Manifest number:          254D
Signing time:             Sat 18 Oct 2025 14:52:38 +0000
Manifest this update:     Sat 18 Oct 2025 14:52:38 +0000
Manifest next update:     Sat 25 Oct 2025 14:52:38 +0000
Files and hashes:         1: E1-CL_RWQDka60bEN1QQAmBpOlc.crl (hash: d/1ncVRj7EFU7At+KG37+Nb9eWU3AqPUmb8cZcorj7Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl
                          rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:52:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9549 (0x254d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9484, serialNumber=135F822FF45640391AEB46C43754100260693A57
        Validity
            Not Before: Oct 18 14:52:38 2025 GMT
            Not After : Oct 25 14:52:38 2025 GMT
        Subject: CN=68f3a9b6-fbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:06:8f:69:93:fe:c8:82:1c:42:e7:05:67:d6:
                    8e:f3:cd:7a:e9:17:8d:c2:ee:29:0c:0f:a3:70:56:
                    87:ad:b1:35:7a:3c:7d:40:50:09:5e:03:48:aa:6a:
                    77:52:61:d0:30:36:3e:6c:6d:97:a7:77:dd:74:a9:
                    25:c1:00:cb:f4:ef:ea:5b:2e:e4:ef:a3:87:5e:65:
                    33:97:80:4b:f0:9a:c2:42:f3:db:b8:be:c6:17:f5:
                    5d:52:b2:0b:f1:2a:51:a5:a1:a5:02:24:5b:92:21:
                    a4:01:a6:a8:a7:c0:7f:95:56:38:05:00:57:8f:3b:
                    bb:69:41:e8:17:71:7f:9d:ca:b2:ad:8d:44:1e:37:
                    1e:78:a6:7a:61:eb:a5:9b:5e:01:14:c3:2d:92:09:
                    96:8d:50:ae:a5:d3:9e:0c:a9:53:bd:9a:31:e5:ab:
                    5e:d4:1c:f0:b5:a5:50:bf:87:f5:c0:a1:13:55:56:
                    d3:05:37:00:70:f2:c5:08:c8:b1:fb:5d:cc:bb:92:
                    87:06:90:b1:d6:1c:e3:01:de:48:ce:a4:79:30:f9:
                    ba:46:b3:1f:85:e8:3b:06:62:9e:fc:85:ba:1f:bf:
                    5e:fe:01:b8:3b:f3:78:07:30:24:58:4d:8d:ff:3e:
                    f4:e8:aa:d9:8d:e1:e2:4a:57:a1:24:1d:b6:0c:9c:
                    1f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:18:0B:BC:74:AF:1C:F4:40:A4:B8:67:71:E6:F9:01:F4:E0:5E:CE
            X509v3 Authority Key Identifier:
                keyid:13:5F:82:2F:F4:56:40:39:1A:EB:46:C4:37:54:10:02:60:69:3A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/E1-CL_RWQDka60bEN1QQAmBpOlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9484/0A0F85FC290E11E593BFC626C4F9AE02/E1-CL_RWQDka60bEN1QQAmBpOlc.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7d:99:b3:0c:d0:e9:f7:ea:0b:47:ec:8a:81:f9:b0:74:4f:
         70:c0:43:86:a2:26:30:b8:78:d3:6b:dd:d8:26:ca:a3:1a:44:
         d8:c9:88:da:a0:04:ba:94:89:8d:da:d9:c2:f9:fa:cb:93:f7:
         2c:42:07:8a:14:b1:df:90:a4:d9:97:a2:74:06:91:e6:e0:29:
         63:55:eb:d2:c4:0b:93:a8:fb:4c:6e:84:42:90:a7:a5:1b:44:
         50:76:a7:47:dc:39:20:e1:40:4d:d7:fd:d7:9b:d5:f7:bd:72:
         6c:94:1b:09:e2:03:ab:1d:a1:c9:c8:d2:dc:54:a8:d4:34:63:
         62:3d:fa:d1:e3:4a:c3:16:33:66:9f:fe:e8:48:ae:81:9f:29:
         89:e4:b2:49:26:72:cb:2c:3e:c1:60:fa:26:96:f6:71:b0:d9:
         e7:5d:de:71:c6:48:f3:e1:f4:20:51:8f:2c:8c:e4:50:0c:ee:
         f5:26:80:3e:3a:01:1c:18:9a:3a:7b:1a:04:b1:08:f6:eb:f1:
         91:fc:54:30:dd:0f:82:21:da:f4:2b:14:7d:51:1e:fd:50:fd:
         e9:cf:78:8b:38:2b:b3:f4:7e:d6:6a:06:37:76:cd:23:64:ec:
         ec:73:07:97:7b:92:a7:5b:3e:8d:ed:ce:83:ac:2c:f7:e2:d3:
         41:a7:5a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 23:32:49 2025 by rpki-client